General
- Target 5cf127ef0de2b37087187f6d176ec94f03d6a5cfa4354bad801336f037a201cd
- Size 70KB
- Sample260916-h4bzza1v7n
- SHA256 5cf127ef0de2b37087187f6d176ec94f03d6a5cfa4354bad801336f037a201cd
- MD5 ce928841e6e0697b6839751e2bd6848d
- SHA1 9ae36f63cc82d5825d3e8f89c70b521c907d5ce2
- SHA512 c6ce72eb10d6ce83c2d657cb1cbdbedfd38e1aa5178741acbb7544ce99d94fabd07d2279ad29bc750c92709ee9d87bc5699621eabd86c450db46f03090015e8a
- SSDEEP 768:MApQr0zvdFJI34iGxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzEMMkxmmvJ:MAaEJlosh7pWezEPJgM9u
- TLSH T18A63FD207AE20625EF3B8B3588BAB6F11D767C566C02950EC441F6F418B6AD1DD6CF0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5cf127ef0de2b37087187f6d176ec94f03d6a5cfa4354bad801336f037a201cd.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 5cf127ef0de2b37087187f6d176ec94f03d6a5cfa4354bad801336f037a201cd
- Size 70KB
- SHA256 5cf127ef0de2b37087187f6d176ec94f03d6a5cfa4354bad801336f037a201cd
- MD5 ce928841e6e0697b6839751e2bd6848d
- SHA1 9ae36f63cc82d5825d3e8f89c70b521c907d5ce2
- SHA512 c6ce72eb10d6ce83c2d657cb1cbdbedfd38e1aa5178741acbb7544ce99d94fabd07d2279ad29bc750c92709ee9d87bc5699621eabd86c450db46f03090015e8a
- SSDEEP 768:MApQr0zvdFJI34iGxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzEMMkxmmvJ:MAaEJlosh7pWezEPJgM9u
- TLSH T18A63FD207AE20625EF3B8B3588BAB6F11D767C566C02950EC441F6F418B6AD1DD6CF0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory